Privacy policy

Peptint ("we," "our," or "us") runs this e-commerce website along with its related services (together, the "Platform"). We're based in the United Kingdom and act as the data controller in charge of your personal information.

By visiting or using our Platform, you confirm that you understand and accept the practices set out in this Privacy Policy.

1. DATA CONTROLLER DETAILS

PEPTINT

Address: 156 Grafton Road, Oldbury B68 8BL, United Kingdom
Email: support@peptint.com
Phone Number:+44 7451259176
Customer Service Hours: Monday to Friday, 10:00 a.m. – 6:00 p.m. (GMT)

We aim to respond to all inquiries within 24 hours.

2. TYPES OF PERSONAL INFORMATION WE COLLECT

The personal data we gather depends on how you use our Platform and can include:

Identification and Contact Details: Your name, email address, phone number, delivery address, and billing address.

Purchase and Transaction Data: Items you've ordered or returned, order totals, payment references, and partial payment details (full card numbers are handled by our payment partners and are never stored on our end).

Account Data (for registered users): Login credentials, usernames, and any preferences you've saved.

Support Communications: Messages, attachments, and any correspondence you've exchanged with our customer service team.

Technical and Usage Information: IP addresses, device identifiers, browser type, operating system, pages you've visited, clickstream data, and cookie identifiers.

3. HOW WE COLLECT YOUR INFORMATION

Directly from you: When you place an order, register for an account, sign up for our communications, or reach out to customer support.

Automatically: Via cookies, pixels, and similar tracking tools while you browse our Platform.

From third parties: Through service providers who help us with payment handling, shipping, marketing, and analytics.

4. WHY WE PROCESS YOUR DATA AND OUR LEGAL BASIS (GDPR ARTICLE 6)

Your personal information is processed for the reasons set out below:

Order Processing and Account Management (completing purchases, arranging deliveries, managing returns, offering customer support) — Legal basis: Performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

Payment Handling and Fraud Prevention — Legal basis: Legitimate interests (Art. 6(1)(f)) along with compliance with legal obligations, including financial and tax rules (Art. 6(1)(c)).

Platform Improvement and Analytics (studying user behaviour, fixing technical issues, improving how our Platform works) — Legal basis: Legitimate interests (Art. 6(1)(f)).

Marketing and Promotional Activities (sending out newsletters, personalised offers, and targeted advertising) — Legal basis: Consent where the law requires it (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f)). You're free to opt out whenever you'd like.

Legal and Regulatory Compliance (meeting tax duties, preparing financial reports, replying to lawful requests from authorities) — Legal basis: Legal obligation (Art. 6(1)(c)).

5. COOKIES AND TRACKING TECHNOLOGIES

We make use of cookies and similar technologies to:

Support essential website functions (essential cookies),
Remember the settings and preferences you've chosen,
Track site performance and user engagement, and
Serve you relevant marketing content where allowed.

Where the law requires it, we'll ask for your consent to non-essential cookies the first time you visit our Platform. You're able to change your cookie preferences at any time using our cookie settings panel or through your browser's own controls. Bear in mind that switching off certain cookies can affect how the Platform works.

6. SHARING YOUR INFORMATION

We only share personal data when it's needed to run our Platform:

E-commerce Platform Provider (Shopify): For hosting, order management, and security.

Payment Processors: For secure payment handling and fraud protection.

Logistics and Fulfilment Partners: For dispatching orders and processing returns.

Technology and Analytics Providers: For cloud hosting, email delivery, and performance tracking.

Professional Advisors: For legal, accounting, and compliance support when necessary.

Corporate Transactions: In the case of a merger, acquisition, or sale of assets, your data may be passed on to the new entity.

We never sell your personal information to any third party under any circumstances.

7. INTERNATIONAL DATA TRANSFERS

Some of our service providers (Shopify and its sub-processors among them) may handle your data outside the United Kingdom or the European Economic Area. Whenever these transfers happen, we put appropriate safeguards in place, such as EU Standard Contractual Clauses (SCCs). If you'd like to see copies of the relevant transfer documentation, just contact us (though some details may be redacted for confidentiality reasons).

8. DATA RETENTION

We hold on to personal data only for as long as it's needed to serve the purposes described in this Policy and to meet our legal duties. Our usual retention periods are:

Transaction and Invoice Records: Up to 10 years (as required by tax and accounting laws).

Account Information: For as long as your account remains active; deleted or anonymised after a long period of inactivity and once any legal retention period has passed.

Customer Service Records: Up to 3 years after resolution (longer if required for legal proceedings).

Marketing Preferences: Until you withdraw consent or object to processing; from that point on, your details are removed from promotional communications.

9. YOUR RIGHTS UNDER DATA PROTECTION LAW

Under the UK GDPR and EU GDPR, you're entitled to:

Access the personal data we hold about you,
Ask us to correct any inaccurate or incomplete information,
Ask us to delete your data in certain situations,
Restrict or object to how it's processed,
Receive your data in a portable format, and
Withdraw your consent at any point (where processing relies on consent).

To use any of these rights, please email us at support@peptint.com. We might need to confirm your identity before acting on your request. We'll reply within one month (this window can be extended by up to two additional months for complex requests, and we'll let you know in advance if that happens).

You're also entitled to file a complaint with a supervisory authority. In the UK, that's the Information Commissioner's Office (ICO). If you live in the EEA, you can reach out to your local data protection authority.

10. CHILDREN'S PRIVACY

Our Platform isn't intended for or aimed at anyone under 16 years of age. We don't knowingly gather personal data from children. If you think a child has shared personal information with us, please let us know right away so we can remove it.

11. AUTOMATED DECISION-MAKING

We don't carry out automated decision-making or profiling that produces legal effects or similarly significant impacts on you (as set out in GDPR Article 22).

12. SHOPIFY PLATFORM

Our online shop runs on Shopify, which supplies hosting, order management, analytics, and security infrastructure. Shopify handles your data as our data processor and may independently control certain aggregated or platform-level information. For more information, please have a look at Shopify's Privacy Policy and Privacy Portal.

13. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be published on this page with a refreshed "Last Modified" date. Where the changes are significant, we'll notify you as required under applicable law.

14. CONTACT INFORMATION

If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please get in touch: